kentico Vulnerability Advisory Catalog

Total 53 security vulnerabilities recorded for kentico software and firmware.

← Back to All Vendors
CVE-2018-7205 MEDIUM
Component: xperience

Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote attackers to execute malicious ...

📅 2018-02-20
CVSS 4.8 Dossier →
Component: xperience

Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a d...

📅 2018-02-20
CVSS 7.2 Dossier →
Component: xperience

Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML docu...

📅 2018-01-08
CVSS 7.8 Dossier →
CVE-2015-7823 UNKNOWN
Component: kentico_cms

Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web s...

📅 2015-10-21
CVSS 5.8 Dossier →
CVE-2015-7822 UNKNOWN
Component: kentico_cms

Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a (1) paramet...

📅 2015-10-21
CVSS 5.0 Dossier →
Page 3 of 3 (53 Total Records)